$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/eb73b4f3-0d83-3724-8ffa-11ddb59f8714.roa File: eb73b4f3-0d83-3724-8ffa-11ddb59f8714.roa (raw, json) Hash identifier: 3ElSoL3xvqqaUx4D4WeakRe8zUk/cvjBetwlmnclQfc= Subject key identifier: 83:40:4D:09:4F:27:C7:F3:D9:3A:C3:46:C7:1B:27:24:61:82:45:05 Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F43285849A2C45EFA6B180CCD5F586AC0 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/eb73b4f3-0d83-3724-8ffa-11ddb59f8714.roa Signing time: Thu 24 Apr 2025 20:10:26 +0000 ROA not before: Thu 24 Apr 2025 20:10:26 +0000 ROA not after: Wed 23 Jul 2025 20:10:26 +0000 asID: 10384 IP address blocks: 152.87.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:c4:5e:fa:6b:18:0c:cd:5f:58:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Apr 24 20:10:26 2025 GMT Not After : Jul 23 20:10:26 2025 GMT Subject: CN=4b6e6fbd-e186-436a-b322-02f8acab5e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7c:bf:bb:15:04:a0:45:af:38:7e:ff:dd:8e: f8:03:41:5d:11:e5:3f:d0:c7:90:9b:78:bc:a7:de: 68:d4:e3:1c:d0:ec:f9:8b:02:47:7e:40:09:c3:af: 81:bd:4a:00:62:31:df:07:e1:db:de:d8:07:d4:5d: 02:2f:42:b3:61:91:95:b6:f7:6d:01:b0:de:a1:41: 98:2a:d2:ea:49:a6:d9:45:6d:f1:2a:16:4e:99:e7: 5d:7a:60:c6:47:98:30:39:f8:ef:5f:73:a2:17:bc: 25:44:17:97:c0:34:21:3e:a5:4e:89:74:15:3f:3c: bc:b9:3c:1d:b1:6c:49:a8:fb:7e:f4:72:0c:95:89: 3f:43:b8:b7:8d:37:2f:a2:60:82:d4:5f:4a:db:63: 44:9d:fe:e3:ca:ff:8d:cc:63:60:ca:55:ef:44:9f: f5:77:a9:fb:33:7c:de:a9:98:56:b8:a7:57:ad:00: cb:c8:56:d9:0e:60:5f:d9:f5:d6:06:c9:bd:fb:b8: 25:66:2e:8b:00:bf:f4:5f:be:4a:94:72:b4:84:05: e3:48:2e:64:56:bd:7d:5b:56:ed:31:17:f9:51:67: 70:17:eb:c1:ff:dc:6a:a4:dc:d9:6b:b4:9c:c9:47: ba:3f:d4:02:3e:4d:85:cb:cb:b0:fc:ee:ca:89:03: 4f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:40:4D:09:4F:27:C7:F3:D9:3A:C3:46:C7:1B:27:24:61:82:45:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/eb73b4f3-0d83-3724-8ffa-11ddb59f8714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.87.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:16:0b:9a:c1:a1:a2:7b:c3:e2:a3:af:6c:80:66:30:59:44: c8:f4:e7:a0:d9:09:40:91:f2:14:cb:a2:89:50:1a:7d:c9:5d: 75:e2:45:5b:e9:4f:72:23:09:13:e1:50:af:71:cc:8c:80:8a: 7b:14:40:0c:bf:6a:cc:6f:3c:f7:ee:61:b6:fd:db:19:d8:35: 45:68:74:e5:92:ee:16:e4:d4:95:c5:04:55:29:a5:23:49:e1: f5:2d:44:90:87:27:99:9a:9b:bf:21:e8:70:ab:a1:5d:b1:e3: 8a:4c:c7:30:26:9a:86:72:b0:c4:23:40:19:88:37:e7:ba:f8: fe:52:10:1f:1a:ee:98:6a:47:78:02:5c:69:ee:45:30:f6:a7: 6c:25:95:b1:68:ac:1a:7e:58:11:16:ec:d3:ae:d8:19:d7:00: 7e:f6:91:10:8b:fa:15:71:a4:d1:86:85:b0:67:a7:64:29:86: d2:2c:cb:39:55:18:b8:d0:e9:57:13:40:93:58:e6:fd:1a:45: 8b:29:3e:cd:61:09:d6:b3:d8:a3:e7:ff:06:91:d5:ec:fb:3f: a4:a2:ef:44:8e:6e:65:1d:3d:0b:77:22:a7:84:64:54:f7:1c: 8f:1d:62:67:f1:ce:a4:64:52:13:63:b7:16:fd:48:f8:f0:ef: a6:91:78:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmixF76axgMzV9YasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MDQyNDIwMTAyNloXDTI1MDcyMzIwMTAyNlowLzEtMCsGA1UEAxMk NGI2ZTZmYmQtZTE4Ni00MzZhLWIzMjItMDJmOGFjYWI1ZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjny/uxUEoEWvOH7/3Y74A0FdEeU/0MeQm3i8 p95o1OMc0Oz5iwJHfkAJw6+BvUoAYjHfB+Hb3tgH1F0CL0KzYZGVtvdtAbDeoUGY KtLqSabZRW3xKhZOmeddemDGR5gwOfjvX3OiF7wlRBeXwDQhPqVOiXQVPzy8uTwd sWxJqPt+9HIMlYk/Q7i3jTcvomCC1F9K22NEnf7jyv+NzGNgylXvRJ/1d6n7M3ze qZhWuKdXrQDLyFbZDmBf2fXWBsm9+7glZi6LAL/0X75KlHK0hAXjSC5kVr19W1bt MRf5UWdwF+vB/9xqpNzZa7ScyUe6P9QCPk2Fy8uw/O7KiQNPiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINATQlPJ8fz2TrDRscbJyRhgkUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvZWI3M2I0ZjMtMGQ4My0z NzI0LThmZmEtMTFkZGI1OWY4NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmFcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYWC5rBoaJ7w+Kjr2yAZjBZRMj056DZCUCR8hTLoolQGn3JXXXiRVvp T3IjCRPhUK9xzIyAinsUQAy/asxvPPfuYbb92xnYNUVodOWS7hbk1JXFBFUppSNJ 4fUtRJCHJ5mam78h6HCroV2x44pMxzAmmoZysMQjQBmIN+e6+P5SEB8a7phqR3gC XGnuRTD2p2wllbForBp+WBEW7NOu2BnXAH72kRCL+hVxpNGGhbBnp2QphtIsyzlV GLjQ6VcTQJNY5v0aRYspPs1hCdaz2KPn/waR1ez7P6Si70SObmUdPQt3IqeEZFT3 HI8dYmfxzqRkUhNjtxb9SPjw76aReKI= -----END CERTIFICATE-----Generated at Sat May 3 14:17:18 2025 by rpki-client